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INFORMATION PROCESSING APPARATUS 



BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

5 This invention relates to an information processing 

apparatus and, more particularly, to an information 
processing apparatus for performing a process for searching 
for a file stored in a memory. 

(2) Description of the Related Art 

10 The inverted index system is known as a method for 

searching text at high speed. In this method, words 
included in a document to be searched are extracted, data 
structure (inverted index) in which a document including a 
word can be looked up easily on the basis of the word is 

15 created (indexing) in advance, and a result (document 
including a particular word) is searched for at high speed 
by using that data structure at search time. 

By the way, the rights of access (access rights) may 
be created for a document in order to permit a particular 

20 user alone to use it. If a document for which such access 
rights are created is searched for, only documents for which 
a user who made a request has access rights need to be 
displayed as search results. Otherwise he/she will see the 
number of documents for which he/she does not have access 

25 rights, which is not desirable from the viewpoint of 
security. 

Fig. 43 is a view showing an example of an 
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information processing apparatus for searching for a 
document for which such access rights are created. 

As shown in Fig, 43, an information processing 
apparatus 1 comprises an indexer la, an index storing 
5 section lb, a text searching engine Ic, and an access right 
filter Id and searches a group of documents stored in a 
document store 2 for a document including a query input. 

The indexer la generates an index by extracting 
necessary information from documents stored in the document 
10 store 2 in compliance with indexing conditions input and 
stores it in the index storing section lb. 

The index storing section lb stores an index 
generated by the indexer la. 

The text searching engine Ic searches the index 
15 storing section lb for an index including a keyword supplied 
from a user. 

The access right filter Id specifies the original 
document in the document store 2 corresponding to an index 
searched for by the text searching engine Ic and obtains its 
20 access right information. The access right filter Id 
selects only documents for which a user who searched has 
access rights and outputs them as search results. 

The operation of the above example will now be 
described. 

25 The indexer la searches documents stored in the 

document store 2 in a predetermined cycle and generates an 
index in compliance with indexing conditions, which are 
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information for specifying the type of information obtained 
from documents and a method for obtaining it. 

The indexer la obtains the title and body of each of 
documents stored in the document store 2 in compliance with 
5 these conditions and generates an index. As a result, an 
index corresponding to each of documents stored in the 
document store 2 will be stored in the index storing section 
lb. 

In this state of things, it is assumed that a user 

10 supplies keyword " { Title=Proposal ) & ( Body=Internet ) " to the 
text searching engine Ic, The text searching engine Ic 
searches the index storing section lb for an index which 
includes the input keyword in each of its title and body, 
and supplies the search result to the access right filter Id. 

15 The access right filter Id inputs user information 

(user ID, for example) necessary for specifying a user. 
Then the access right filter Id specifies the original 
document in the document store 2 corresponding to an index 
given as the search result and checks by comparing its right 

20 information and the user information whether or not the user 
has access rights for the document. If the user has access 
rights, then the access right filter Id outputs the title of 
the document as the search result . 

The above processes will enable to refer to right 

25 information given to each document and to output only 
information for which a user has access rights as search 
results . 
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By the way, a striking feature of a full text search 
with an inverted index described above is great speed. 
However, in a filtering system in which an inquiry about 
access rights is made for each of documents included in a 
5 list obtained as a search result, filtering will take time, 
which makes great speed in search meaningless. 

In addition, a full text search with an inverted 
index outputs "the number of hits," being the number of 
documents which meet a condition imposed by a search query, 

10 as search results. The conventional method described above, 
however, cannot calculate the number of really valid hits 
(based on access rights) before a filtering process. 
Therefore, when the number of hits before a filtering 
process reaches hundreds of thousands or millions, a 

15 filtering process takes a very long time. As a result, it 
takes much time to display the number of hits. 



SUMMARY OF THE INVENTION 
In order to address such a problem, the present 
20 invention was made. In other words, an object of the 
present invention is to provide an information processing 
apparatus that can search for information at high speed - 

In order to achieve the above object, an information 
processing apparatus for performing a process for searching 
25 for a file stored in a memory is provided. This information 
processing apparatus comprises file information obtaining 
means for obtaining predetermined information from the file. 
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right information obtaining means for obtaining right 
information indicating a user who can access the file, index 
storing means for storing an index in which information 
obtained by the file information obtaining means is 
5 associated with right information obtained by the right 
information obtaining means, keyword inputting means for 
accepting keyword input for searching for the file, user 
specifying means for specifying a user who input the keyword, 
search query generating means for generating a search query 

10 from a keyword input from the keyword inputting means and 
information indicating a user specified by the user 
specifying means , and searching means for searching the 
index storing means for an index corresponding to a search 
query generated by the search query generating means. 

15 The above and other objects, features and advantages 

of the present invention will become apparent from the 
following description when taken in conjunction with the 
accompanying drawings which illustrate preferred embodiments 
of the present invention by way of example. 

20 

BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a view for describing the operating 
principle of the present invention; 

Fig. 2 is a view showing the configuration of a 
2 5 system including an information processing apparatus 
according to the present invention; 

Fig. 3 is a block diagram showing the configuration 
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of an embodiment of the present invention; 

Fig. 4 is a view for giving an overview of functions 
achieved by an information processing apparatus when a 
predetermined program stored in the HDD shown in Fig. 3 is 
5 executed; 

Fig. 5 is a flow chart for describing an example of 
a procedure performed when an index is generated in the 
embodiment shown in Fig. 3; 

Fig, 6 is an example of an index generated by the 
10 procedure shown in Fig, 5; 

Fig. 7 is a flow chart for describing an example of 
a procedure performed when a document is searched for in the 
embodiment shown in Fig. 3; 

Fig. 8 is an example of a screen for specifying a 
15 target document store when the flow chart shown in Fig. 7 is 
performed; 

Fig. 9 is an example of a screen for performing user 
authentication when the flow chart shown in Fig. 7 is 
performed; 

20 Fig. 10 is an example of a screen for inputting a 

keyword when the flow chart shown in Fig. 7 is performed; 

Fig. 11 is a view showing how a search query is 
generated from keywords and access rights; 

Fig. 12 is an example of a screen displaying search 
2 5 results obtained as a result of performing the flow chart 
shown in Fig. 7; 

Fig, 13 is a view showing the detailed configuration 
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of the ACL reflecting indexer shown in Fig. 4; 

Fig. 14 is a view showing the detailed configuration 
of the ACL reflecting query generator shown in Fig. 4; 

Fig. 15 is a view showing an example of the 
5 operation of a stored document determining sections- 
Fig. 16 is a view showing an example of the 
operation of a stored document determining section; 

Fig- 17 is a view showing an example of the 
operation of an index generating section; 
10 Fig. 18 is a view showing an example of the 

operation of an index generating section; 

Fig. 19 is a view showing an example of the 
operation of an index generating section; 

Fig. 20 is a view showing an example of the 
15 operation of a document store inquiring section; 

Fig. 21 is a view showing an example of the 
operation of an access control (ACL) query generating 
section; 

Fig. 22 is a view showing an example of the 
20 operation of an access control (ACL) query generating 
section; 

Fig. 23 is a view showing an example of the 
operation of an access control (ACL) query generating 
section; 

2 5 Fig. 24 is a view showing an example of the 

operation of a query synthesizing section; 

Fig, 2 5 is a view showing an example of the 
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operation of a document store name managing module; 

Fig. 26 is a view showing an example of the 
operation of a document store name managing module; 

Fig. 27 is a view showing an example of the 
5 operation in the case of searching a plurality of document 
stores simultaneously; 

Fig. 28 is a view showing an example of the 
operation of a multiple document store simultaneous treating 
module; 

10 Fig. 29 is a view showing an example of the 

operation of a multiple document store simultaneous treating 
module ; 

Fig. 30 is a view showing an example of the 
operation of a multiple document store simultaneous treating 
15 module; 

Fig. 31 is a view showing an example of the 
operation of a multiple document store simultaneous treating 
module ; 

Fig. 32 is a view showing an example of the 
20 operation of an access right managing module; 

Fig. 33 is a view showing an example of the 
operation of an access right managing module; 

Fig. 34 is a view showing an example of the 
operation of an access right managing module; 
25 Fig. 35 is a view showing an example of the 

operation of an access right managing module; 

Fig. 36 is a view showing an example of the 
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operation of an administrator authorization treating module; 

Figs. 37(A) and 37(B) are views showing an example 
of the operation of an administrator authorization treating 
module ; 

5 Figs. 38(A) and 38(B) are views showing an example 

of the operation of an access right management on/off 
switching modules- 
Figs. 39(A) and 39(B) are views showing an example 
of the operation of an access right management on/off 
10 switching module; 

Fig. 40 is a view showing an example of the 
operation of an access right management on/off switching 
module; 

Fig. 41 is a view showing an example of the 
15 operation of a group definition expanding module; 

Fig. 42 is a view showing an example of the 
operation of a group definition expanding module; 

Fig. 43 is a view showing an example of a 
conventional information processing apparatus. 

20 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
An embodiment of the present invention will now be 
described with reference to the drawings. 

Fig. 1 is a view for describing the operating 
2 5 principle of the present invention. In Fig. 1, an 
information processing apparatus 10 according to the present 
invention comprises file information obtaining means 10a, 
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right information obtaining means 10b, index storing means 
10c, keyword inputting means lOd, user specifying means lOe, 
search query generating means lOf, and searching means lOg 
and searches files stored in a memory 20 for one including a 
5 keyword input . 

It should be understood that "file" in this 
specification includes a wide range of information, such as 
text and an image. 

The file information obtaining means lOa obtains, 
10 for example, a title and body as file information from each 
of files stored in the memory 20. In this example the file 
information obtaining means lOa obtains the full text of a 
file, but it may obtain, for example, only keywords included 
in a body. 

15 The right information obtaining means 10b obtains 

right information indicating a user who can access each file 
from the memory 20. Right information in this example is 
information for giving access rights to a particular user or 
group and information for giving access rights to all users . 

20 The index storing means 10c generates an index from 

file information obtained by the file information obtaining 
means 10a and right information obtained by the right 
information obtaining means 10b and stores it. 

The keyword inputting means lOd accepts keyword 

25 input for specifying a predetermined file. 

The user specifying means lOe specifies a user on 
the basis of information for specifying a user, such as a 
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user ID and password input for authentication, for example 
when the user logs in a system. 

The search query generating means lOf generates a 
search query from a keyword input from the keyword inputting 
5 means lOd and information regarding a user specified by the 
user specifying means lOe. 

The searching means lOg searches the index storing 
means 10c for an index corresponding to a search query 
generated by the search query generating means lOf . 
10 The memory 20 consists of, for example, a file 

server and stores a plurality of files with access rights 
for them. 

Now, operation in Fig. 1 will be described. 
It is assumed that the memory 20 stores a plurality 
15 of files. When the process of generating an index is 
started, first the file information obtaining means 10a 
obtains a file from the memory 20 and then obtains the title 
and body of the file. 

Next, the right information obtaining means 10b 
20 obtains right information indicating a user who is permitted 
to access the file from the file from which the file 
information obtaining means 10a obtained file information. 

File information and right information obtained in 
this way are supplied to the index storing means 10c. The 
25 index storing means 10c associates file information with 
right information for each file and stores the result as an 
index. As a result, an index corresponding to each of files 
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stored in the memory 20 is generated and stored in the index 
storing means 10c. 

When a predetermined user makes a request to search 
after indexes being stored in the index storing means 10c in 
5 this way, a searching process will be performed. 

In a searching process, first a user inputs a 
predetermined keyword from the keyword inputting means lOd. 
In this case, the user specifying means lOe specifies a user 
who input the keyword on the basis of a user ID and password 
10 input at the time of the user logging in. 

The search query generating means lOf generates a 
search query from a keyword input from the keyword inputting 
means lOd and information indicating a user specified by the 
user specifying means lOe. To be concrete, if a specified 
15 user is "TANAKA" and a keyword is "communication," then the 
search query generating means lOf generates a search query 
for searching for a file which includes keyword 
"communication" and which "TANAKA" is permitted to access. 

The searching means lOg searches the index storing 
20 means lOc for an index corresponding to a search query 
generated by the search query generating means lOf. The 
search results are listed on, for example, a display device 
(not shown) . 

As described above, the information processing 
25 apparatus 10 according to the present invention generates an 
index in which not only file information but also right 
information are associated with a file, and searches on the 
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basis of it. This enables to search for a file at high 
speed with right information taken into consideration. 

Now, an embodiment of the present invention will be 
described. 

5 Fig. 2 is a view showing the configuration of the 

whole of a system including an information processing 
apparatus 30 according to the present invention. 

In Fig. 2, the information processing apparatus 30 
consists of, for example, workstations, mainframes, etc., 

10 generates an index from files stored in servers 43-1 through 
43-3, and displays a list of documents in response to 
requests to search from clients 41-1 through 41-3. The 
detailed configuration of the information processing 
apparatus 30 will be described later. 

15 Networks 40 and 42 consist of, for example, Internet, 

a local area network (LAN), etc. The networks 40 and 42 may 
have the same physical configuration. 

The clients 41-1 through 41-3 consist of, for 
example, a personal computer, make a request to search for 

20 information to the information processing apparatus 30, and 
displays results obtained. 

The servers 43-1 through 43-3 store documents, read 
out a document or right information in response to a request 
from the information processing apparatus 30, and supply it. 

2 5 Fig. 3 is a block diagram showing the detailed 

configuration of the information processing apparatus 30 
shown in Fig. 2. As shown in Fig. 3, the information 



- 13 - 



processing apparatus 30 comprises a central processing unit 
(CPU) 30a, a read only memory (ROM) 30b, a random access 
memory (RAM) 30c, a hard disk drive (HDD) 30d, a graphics 
card (GC) 30e, and an interface (I/F) 30f . 
5 The CPU 30a controls each section of the apparatus 

and performs various operations in compliance with programs 
stored in the HDD 30d etc. 

The ROM 30b stores basic programs executed by the 
CPU 30a, data, and the like. 
10 The RAM 30c temporarily stores programs being 

executed by the CPU 30a and data being operated by the CPU 
30a. 

The HDD 30d stores programs executed by the CPU 30a, 
indexes , etc . 

15 The GC 30e performs a drawing process in accordance 

with a drawing command supplied from the CPU 30a, converts 
an image obtained to image signals, and outputs them. 

The I/F 30f properly converts the format of data 
input from an input device 32, and performs format or 
20 protocol conversion so that information can be sent and 
received via the networks 40 and 42. 

A display device 31 consists of, for example, a 
cathode ray tube (CRT) monitor etc. and displays image 
signals output from the GC 30e of the information processing 
25 apparatus 30. 

The input device 32 consists of, for example, a 
keyboard or mouse, generates information in response to a 
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user's operation, and outputs it. 

In this embodiment, a program stored in the HDD 30d 
shown in Fig. 3 is read out to the RAM 30c at need and 
various processes are performed. Fig. 4 is a view for 
5 giving an overview of functions achieved by the information 
processing apparatus 30 when a predetermined program stored 
in the HDD 30d is executed. 

In Fig. 4, an access control (ACL) reflecting 
indexer 51 generates an index conforming to indexing 
10 conditions input and stores it in an index storing section 
52. 

The index storing section 52 stores an index 
supplied from the ACL reflecting indexer 51, In this case, 
if a plurality of document stores exist, indexes are stored 
15 separately, for example, according to document stores. 

A text searching engine 53 searches the index 
storing section 52 for an index corresponding to a query 
(search query) supplied from an ACL reflecting query 
generator 54 and outputs it as a search result. 
20 The ACL reflecting query generator 54 generates a 

search query from a keyword input by a user and information 
indicating access rights and supplies it to the text 
searching engine 53. 

An overview of operation in the above embodiment 
25 will now be given. 

First, operation performed when an index is 
generated will be described with reference to Fig. 5. This 
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flow chart is started and executed in a predetermined cycle. 
The following procedure will be performed in compliance with 
this flow chart. 

[SI] The ACL reflecting indexer 51 obtains the title 
5 of a predetermined document stored in a document store 55- 

For example, the ACL reflecting indexer 51 obtains 
the title "Proposal" from a document. 

[S2] The ACL reflecting indexer 51 obtains the body 
of the document . 

10 For example, the ACL reflecting indexer 51 obtains 

the body "With the propagation of Internet, the market is 
globalized increasingly..." from the document. 

[S3] The ACL reflecting indexer 51 stores the title 
and body, which were obtained in steps SI and S2, in Title 
15 and Body of an index respectively. 

[S4] The ACL reflecting indexer 51 obtains access 
right information regarding the document from the document 
store 55. 

[S5] The ACL reflecting indexer 51 judges whether or 
20 not access to the document is limited (anybody can refer to 
the document). If access to the document is not limited, 
the ACL reflecting indexer 51 proceeds to step 36; if access 
to the document is limited, the ACL reflecting indexer 51 
proceeds to step S7. 
2 5 [S6] The ACL reflecting indexer 51 stores the symbol 

"ganyone," which indicates that access to the document is 
not limited (that anybody can refer to the document), in ACL 
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of the index where right information is stored. 

[S7] The ACL reflecting indexer 51 judges whether or 
not access to the document is limited so that a 
predetermined group can refer to it. If access to the 
5 document is limited so that a predetermined group can refer 
to it, the ACL reflecting indexer 51 proceeds to step S8; if 
not so, the ACL reflecting indexer 51 proceeds to step S9. 

[S8] The ACL reflecting indexer 51 stores the name 
of the group in ACL of the index and proceeds to step S9. 
10 In this case, the symbol "#" should be added before 

a group name. Doing so will show that a group name appears 
after the symbol. 

[S9] The ACL reflecting indexer 51 judges whether or 
not access to the document is limited so that a 
15 predetermined person can refer to it. If access to the 
document is limited so that a predetermined person can refer 
to it, the ACL reflecting indexer 51 proceeds to step SIO; 
if not so, the ACL reflecting indexer 51 proceeds to step 
Sll. 

20 [SIO] The ACL reflecting indexer 51 stores the name 

of a person who can access the document in ACL of the index . 

[Sll] The ACL reflecting indexer 51 judges whether 
or not a document not processed exists. If a document not 
processed exists, the ACL reflecting indexer 51 returns to 

25 step SI to repeat the same process; if all the documents are 
processed, the ACL reflecting indexer 51 terminates the 
procedure . 
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Fig. 6 is an example of an index generated by the 
above procedure. In this example, "Proposal" is stored as 
"Title" of an index, "With the propagation of Internet, the 
market is globalized increasingly..." is stored as its "Body," 
5 and "taguchi" is stored as its "ACL". Such indexes will be 
generated according to documents and be stored in the index 
storing section 52. 

With reference to Fig. 7, a procedure performed when 
a target document is searched for by the use of an index 
10 generated in the above way will now be described. The 
following procedure will be performed in compliance with 
this flow chart. 

[S20] The ACL reflecting query generator 54 causes a 
display device of a client who made a request to display a 
15 screen shown in, for example. Fig. 8 in order to obtain the 
name of a target document store. 

In the example shown in Fig. 8, a window 60 titled 
"Target Document Store" is displayed and the names of target 
document stores and radio boxes are displayed in a display 
20 area 61. This enables to select a target document store. 
In this example only one document store is selected, but a 
plurality of document stores may be specified at the same 
time . 

At the bottom of the display area 61, an OK button 
25 62 for settling input provided and a cancel button 63 for 
canceling input provided are displayed. 

[S21] The ACL reflecting query generator 54 causes 
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the display device of the client who made a request to 
display a screen shown in, for example. Fig. 9 in order to 
obtain a user ID and password necessary for logging in the 
selected document store* 
5 In the example shown in Fig. 9, a window 70 titled 

"User Authentication for DocServ#l" is displayed and text 
boxes for inputting a user ID and password for DocServ#l 
selected in step S21 are displayed in a display area 71. At 
the bottom of the display area 71, an OK button 72 for 

10 settling input provided and a cancel button 73 for canceling 
input provided are displayed. 

[S22] The ACL reflecting query generator 54 inquires 
of the document store specified in step S20 the user ID and 
password input in step S21 in order to judge whether the 

15 client is a normal user. If the client proves to be a 
normal user, the ACL reflecting query generator 54 proceeds 
to step S23; if not so, the ACL reflecting query generator 
54 terminates the procedure. 

[S23] The ACL reflecting query generator 54 inquires 

20 of the document store specified in step S2G whether the user 
belongs to a group. If the user belongs to a group, the ACL 
reflecting query generator 54 proceeds to step S24; if the 
user does not belong to a group, the ACL reflecting query 
generator 54 proceeds to step S25. 

25 [S24] The ACL reflecting query generator 54 obtains 

the name of a group to which the user belongs from a 
document store. 
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[S25] The ACL reflecting query generator 54 causes 
the display device of the client who made a request to 
display a screen shown in, for example. Fig. 10 in order to 
accept keyword input . If a keyword is input on the screen 
5 shown in Fig. 10, the ACL reflecting query generator 54 
proceeds to step S26; if not so, the ACL reflecting query 
generator 54 returns to step S2 5 to repeat the same process 
until a keyword is input. 

In the example shown in Fig. 10, a window 80 titled 

10 "Search Keyword Input" is displayed and text boxes for 
inputting a keyword included in the title of a target 
document and a keyword included in its body respectively are 
displayed in a display area 81. At the bottom of the 
display area 81, an OK button 82 for settling input provided 

15 and a cancel button 83 for canceling input provided are 
displayed. 

[S26] The ACL reflecting query generator 54 
synthesizes the keyword input and right information to 
generate a search query. 

20 Fig. 11 is a view for describing an example of the 

process of synthesizing a search query. In this example, 
keywords are "Title=Proposal" and "Body=Internet , " right 
information is "User Name=taguchi" and "Password=**** , " and 
group information is "Group Name=search" , These pieces of 

2 5 information are synthesized to obtain a search query shown 
at the bottom of Fig. 11. In this example (Title=Proposal) 
and ( Body = Internet) are combined by the logical product 
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symbol so documents including both of them as keywords 

are searched for. 

Furthermore, (ACL=taguchi) , (ACL=#search) , and 
( ACL=@anyone) are combined by the logical add symbols "j," 
5 so documents the right information of which is "taguchi," 
documents which belong to group "search," or documents 
access to which is not limited are searched for. 

In addition, the keywords and access rights are 
combined by the logical product symbol "&," so documents 
10 which include the above keywords and meet one of the above 
access controls (ACL) are searched for as the whole 
expression . 

[S27] The text searching engine 53 receives the 
search query generated by the ACL reflecting query generator 
15 54 and searches the index storing section 52 for indexes in 
point . 

[S28] The text searching engine 53 sends the titles 
of indexes obtained by searching to the client who made a 
request and causes his/her display device to list them. 

20 As a result, a screen shown in, for example. Fig. 12 

will be displayed on the display device of the client who 
made a request. In this example, a window 90 titled "Search 
Results" is displayed and a message saying that there are 
9890 documents which include "Proposal" in their titles and 

25 "Internet" in their bodies and that the first five documents 
are displayed is displayed in a display area 91. Under this 
message, the titles of documents obtained by searching are 
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listed. Under these titles. Next Item button 92 for 
displaying the next item and Previous Item button 93 for 
displaying the previous one are displayed. 

[S29] If predetermined display items are specified 
5 on the client's display device, the procedure proceeds to 
step S30; if not so, the procedure returns to step S29 to 
repeat the same process . 

[S30] The information processing apparatus 50 
obtains documents in point from the document store 55 and 
10 causes the display device of the client who made a request 
to display them. 

[S31] The information processing apparatus 50 judges 
whether it continues the procedure. If the procedure 
continues, it returns to step S29 to repeat the same 
15 process; if the procedure does not continue, it terminates. 

If Next Item button 92 or Previous Item button 93 
shown in Fig. 12 is clicked, the information processing 
apparatus 50 will obtain documents in point from the 
document store 55 according to the number of times it is 
20 clicked and sends them to the client who made a request. 
This is not shown in this flow chart. 

As described above, in the embodiment of the present 
invention, an index to which right information is added is 
managed. This enables to selectively search for only 
25 documents for which a user who made a request has access 
rights by the use of a search query including right 
information. Accordingly, after search results are obtained. 
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there is no need to inquire of the document store 55 whether 
the user has access rights. This enables a quick searching 
process . 

With reference to Figs. 13 and 14, the detailed 
5 configuration of the embodiment of the present invention 
shown in Fig, 4 and the operation of each of its sections 
will now be described. 

Fig. 13 is a view showing the detailed configuration 
of the ACL reflecting indexer 51. As shown in Fig. 13, the 
10 ACL reflecting indexer 51 includes a stored document 
determining section 511 and an index generating section 512. 

The stored document determining section 511 includes 
an access right managing module 511a and a group definition 
expanding module 511b and determines for which document in 
15 the document store 55 an index should be generated or 
updated. 

The index generating section 512 includes a document 
store name managing module 512a, access right managing 
module 512b, a multiple document store simultaneous treating 
20 module 512c, an access right management on/off switching 
module 512d, and an administrator authorization treating 
module 512e and generates an index actually from a document 
determined by the stored document determining section 511. 

If an access method differs from document store to 
25 document store, the access right managing module 511a 
manages their procedures , 

The group definition expanding module 511b performs 
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a process regarding a group definition at the time of 
generating an index. 

The document store name managing module 512a 
specifies a target document store if there exist a plurality 
5 of document stores . 

The access right managing module 512b manages 
procedures necessary for obtaining right information from 
document stores access rights for which are managed by 
different methods . 
10 The multiple document store simultaneous treating 

module 512c generates an index by which a plurality of 
document stores can be searched simultaneously. 

If the management of access rights is not necessary, 
the access right management on/off switching module 512d 
15 operates so that control by access rights is not performed. 

The administrator authorization treating module 512e 
enables an administrator to search for all documents. 

Fig. 14 is a view showing the detailed configuration 
of the ACL reflecting query generator 54. As shown in Fig. 
20 14, the ACL reflecting query generator 54 includes a 
document store inquiring section 541, an access control(ACL) 
query generating section 542, and a query synthesizing 
section 543. 

The document store inquiring section 541 includes a 
25 document store name managing module 541a and an access right 
managing module 541b, performs user authentication on the 
basis of a user ID and password received from a user, and 
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obtains information regarding a group to which the user 
belongs , 

The access control (ACL) query generating section 542 
includes a multiple document store simultaneous treating 
5 module 542a and generates a search query indicating access 
controls (ACL) . 

The query synthesizing section 543 includes an 
access right management on/off switching module 543a and an 
administrator authorization treating module 543b and 
10 synthesizes search conditions input by a user and a search 
query generated by the access control (ACL) query generating 
section 542. 

The document store name managing module 541a 
specifies a target document store if there exist a plurality 
15 of document stores. 

The access right managing module 541b manages 
procedures necessary for obtaining right information from 
document stores access rights for which are managed by 
different methods . 
20 The multiple document store simultaneous treating 

module 542a performs a process for enabling to search a 
plurality of document stores simultaneously. 

If the management of access rights is not necessary, 
the access right management on/off switching module 543a 
25 operates so that control by access rights is not performed. 

The administrator authorization treating module 543b 
enables an administrator to search for all documents. 
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Now, the detailed operation of each section in the 
above embodiment will be described. 

Fig. 15 is a view for describing the operation of 
the stored document determining section 511. The stored 
5 document determining section 511 basically performs a 
process for determining a document for which an index is 
generated, but it performs a process for synthesizing access 
rights if access rights differ from hierarchy to hierarchy. 
That is to say, if the document store 55 has hierarchy 
10 structure and access rights can be set for each hierarchy, 
access rights for a target document need to be determined 
from its relations with an upper hierarchy. 

In the example shown in Fig. 15, target document 
"proposal, txt" is stored in folder "doc" and access rights 
15 differ between them. That is to say, access rights for 
folder "doc" are "OK" only for owner "taguchi". On the 
other hand, access rights for document "proposal, txt" are 
"OK" for all users. 

In this case it is thought that the stricter access 
20 rights should be adopted for the document. Therefore, if 
access rights for one of the two are "NG," then "NG" is 
adopted for that item. 

Results obtained by synthesizing access rights for 
the folder and document in this way are shown on the left- 
25 hand side of Fig. 15. In this example all the items except 
owner "taguchi" are "NG" . 

In this example the two hierarchies of a document 
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and folder exist, but the above way is also applicable to 
cases where a plurality of hierarchies of other types exist. 

As stated above, if a target document is stored in a 
document store having hierarchy structure and access rights 
5 can be set for each hierarchy, the stored document 
determining section 511 synthesizes access rights for the 
target document and access rights for a hierarchy higher 
than the document to obtain access rights for the document. 
This way is an example. It is a matter of course that the 
10 present invention is not limited to such a case* 

With reference to Fig. 16, a process performed when 
access rights are changed will now be described • 

When access rights for a document stored in the 
document store 55 are changed, ACL in its index needs to be 
15 changed accordingly. 

In this embodiment, therefore, the stored document 
determining section 511 searches the document store 55 every 
predetermined time to check whether or not a difference has 
arisen between the current access rights and the contents of 
20 an index previously generated. If a difference has arisen, 
then an index will be updated in accordance with new right 
information . 

This ensures that an index corresponds to the latest 
information. 

25 With reference to Figs. 17 through 19, the operation 

of the index generating section 512 for setting right 
information in ACL of an index will now be described. 
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Fig. 17 is a view showing how ACL is set to the 
owner of a document. In an example shown in Fig. 17, the 
owner of document "proposal.txt" is "taguchi" and, as shown 
in access right information, the read rights of the owner 
5 are "OK". 

If the access rights of the owner of a document are 

"OK" as with this example, the stored document determining 

section 511 informs the index generating section 512 of this. 

Then the index generating section 512 stores "taguchi," 
10 being the owner's ID, in ACL of the index. As a result, the 

index will indicate that owner "taguchi" has access rights 

for this document. 

Fig. 18 is a view showing how ACL is set in the case 

of a document being owned by a group. In an example shown 
15 in Fig. 18, the group owner of document "proposal.txt" is 

"search" and, as shown in access right information, the read 

rights of the group owner are "OK" , 

If the access rights of a group owner are "OK" as 

with this example, the stored document determining section 
20 511 informs the index generating section 512 of this. Then 

the index generating section 512 stores "#search," being the 

group owner's ID, in ACL of the index. As a result, the 

index will indicate that a user belonging to group "search" 

has access rights for this document. 
25 Fig. 19 is a view showing how right information for 

permitting all users to access a document is set in ACL. 

In an example shown in Fig. 19, the access rights of 
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all users in access right information are "OK" . If the 
access rights of all users are "OK" as with this example, 
the stored document determining section 511 informs the 
index generating section 512 of this* Then the index 
5 generating section 512 stores "ganyone," indicating all 
users, in ACL of the index. As a result, the index will 
indicate that all users have access rights for this document. 

In the above examples access rights were created for 
"owner," "group," and "all users" in that order, but it is 

10 possible to process "all users" preferentially. If access 
rights are given to all users, processes about the access 
rights of users of other types may be omitted. When access 
rights are given to all users, there is no need to give 
access rights individually to an owner or group. 

15 Fig. 20 is a view for describing the operation of 

the document store inquiring section 541. 

As shown in Fig. 20, the document store inquiring 
section 541 obtains a user ID and password input by a user 
from a screen shown in, for example. Fig. 9 when he/she 

20 logged in a system, and inquires of a target document store 
(the document store 55 in this example) input on the screen 
shown in Fig. 8 whether or not this user is a normal user. 

If this user proves to be a normal user, then the 
document store inquiring section 541 also inquires of the 

25 document store 55 the name of a group to which the user 
belongs . 

Next, the document store inquiring section 541 
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provides the user ID and group name to the access 
control(ACL) query generating section 542. 

With reference to Figs. 21 through 23, the operation 
of the access control(ACL) query generating section 542 will 
5 now be described. 

The access control (ACL) query generating section 542 
generates a search query for selecting only documents for 
which a user who searches for has access rights. 

First, as shown in Fig. 21, the access control (ACL) 

10 query generating section 542 generates a search query for 
selecting only documents for which the user has access 
rights on the basis of a user ID supplied from the document 
store inquiring section 541. In this example a user ID is 
"taguchi," so the access control{ACL) query generating 

15 section 542 generates search query ( ACL=taguchi) . 

Next, as shown in Fig. 22, the access control (ACL) 
query generating section 542 generates a search query for 
selecting only documents for which a group which the user 
belongs to has access rights on the basis of a group name 

20 supplied from the document store inquiring section 541. In 
this example the user belongs to group "search," so the 
access control (ACL) query generating section 542 generates 
search query (ACL=#search) . The symbol "#" in this 
expression indicates that a group name appears after it. 

25 The access control(ACL) query generating section 542 

combines the previously generated query and the newly 
generated query by a logical add symbol to generate 
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(ACL=taguchi) | ( ACL=#search) . 

Finally, as shown in Fig. 23, the access 
control(ACL) query generating section 542 adds "@anyone," 
which indicates that access rights are given to all users, 
5 to the search query so that documents for which access 
rights are given to all users can be selected- That is to 
say, the access control(ACL) query generating section 542 
adds "ganyone" to the conditional expression obtained 
through the above process to generate ( ACL=taguchi) 

10 1 (ACL=#search) | (ACL = ganyone ) . The symbol "@" in this 
expression indicates that a character string with a 
particular meaning appears after it . 

Search query ( ACL=taguchi) 

I {ACL=#search) | ( ACL=@anyone) obtained in the above way 

15 indicates that a group of documents which user "taguchi" is 
permitted to access, a group of documents which group 
"search" is permitted to access, and a group of documents 
which all users are permitted to access are all searched. 

With reference to Fig. 24, the operation of the 

20 query synthesizing section 543 will now be described. 

The query synthesizing section 543 synthesizes a 
user-specified search query (conditions input from the 
screen shown in Fig. 10) and a search query indicating 
access controls (ACL) generated by the access control (ACL) 

25 query generating section 542 to generate a final search 
query . 

In an example shown in Fig. 24, a user- specif ied 
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search query is (Title=Proposal) & (Body=Internet ) and a 
search query generated by the access control (ACL) query 
generating section 542 is 

( ACL=taguchi) ] ( ACL=#search) | ( ACL=@anyone) . In this case, 
5 the query synthesizing section 543 combines these 
conditional expressions by a logical product symbol to 
generate final search query 

(Title=Proposal)&(Body=Internet)&(ACL=taguchi) | ( ACL=#search) 
I ( ACL=@anyone) . This conditional expression indicates that 

10 a group of documents which user "taguchi" is permitted to 
access, a group of documents which group "search" is 
permitted to access, and a group of documents which all 
users are permitted to access are searched for a document 
including "proposal" in its title and "Internet" in its body. 

15 With reference to Figs, 25 and 26, the operation of 

the document store name managing modules 512a and 541a will 
now be described. 

If a plurality of document stores exist, it is 
necessary to manage the relations between indexes and 

20 document stores from which they are generated by the index 
generating section 512. In this embodiment, therefore, 
indexes are generated according to document stores, and the 
document store name managing module 512a adds information 
for specifying the corresponding document store to an index 

25 storing section in order to associate an index with the 
document store. As shown in Fig. 25, this enables to 
associate index storing sections with document stores. 
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As shown in Fig. 26, at search time the document 
store name managing module 541a inquires of index storing 
sections in turn to specify the index storing section which 
was generated from a document store in point. For example, 
5 if the document store 55a is selected as one to be searched 
on the screen shown in Fig. 8, the document store name 
managing module 541a inquires of indexes in turn to specify 
the index storing section 52a as one corresponding to the 
document store 55a. 

10 A plurality of document stores can be searched 

simultaneously. In this case, each document store is 
searched and the sum of document sets obtained is generated, 
as shown in Fig. 27. As a result, a target document group 
can be obtained. In an example shown in Fig. 27, all of the 

15 document stores 55a through 55c are searched and search 
results obtained from the index storing sections 52a through 
52c each corresponding to one of the document stores are 
synthesized into the final search result. 

With reference to Figs. 28 through 31, the operation 

20 of the multiple document store simultaneous treating modules 
512c and 542a will now be described. 

If a plurality of document stores exist, these 
modules manage the correspondences of the document stores to 
indexes. This is the same with the above case. In the 

25 above case, index storing sections were created according to 
document stores, but, in this example, one index storing 
section will be created for a plurality of document stores. 
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As shown in Fig. 28, in this embodiment, indexes 
generated from the document stores 55a and 55b are stored in 
the same index storing section 52. In this case, the 
multiple document store simultaneous treating modules 512c 
5 gives the indexes information for specifying their original 
document stores. In this example, item "Server" is added to 
each index and information for specifying its original 
document store is stored in this item. Moreover, the 
corresponding docximent store names "DocServ#l" and 
10 "DocServ#2" are given to the index storing section 52. 

Figs. 29 and 30 are views for describing operation 
for searching by the use of an index generated in the above 
way. 

As shown in Fig. 29, the multiple document store 
15 simultaneous treating module 542a generates search query 
(Server=DocServ#l ) for making a document store name supplied 
from the document store inquiring section 541 a search 
condition. 

The multiple document store simultaneous treating 
20 module 542a generates search query (Server=DocServ#l ) for 
making a document store name supplied from the document 
store name managing module 541a a search condition. 

Next, as shown in Fig. 30, the multiple document 
store simultaneous treating module 542a synthesizes a 
25 conditional expression indicating a document store and a 
conditional expression indicating access rights to generate 
an access control(ACL) expression for narrowing down access 
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rights and a document store. In this example, conditional 
expression indicating a document store ( Server =DocServ#l ) 
and conditional expression indicating access rights 
(ACL^taguchi) | ( ACL=#search) j { ACL=@anyone) are synthesized to 
5 generate 

(Server=DocServ#l)&{ (ACL=taguchi) | ( ACL=#search) | (ACL=@anyone 
)). 

A plurality of document stores can be searched 
simultaneously. In this case, an objective conditional 

10 expression is obtained by synthesizing search querys each 
corresponding to a document store by a logical add symbol, 
as shown in Fig. 31. 

In an example shown in Fig. 31, search query 
(Server=DocServ#l)&( (ACL=taguchi) | ( ACL=#search) | (ACL=@anyone 

15 )) for the document store 55a and search query 
(Server=DocServ#2)&( ( ACL=taguchi) | ( ACL=#search) | (ACL=@anyone 
) ) for the document store 55b are combined by a logical add 
symbol to generate objective search query 

( (Server=DocServ#l)&( (ACL=taguchi) | ( ACL=#search) | (ACL=@anyon 

20 e))) 1 ( (Server =DocServ#2)&( (ACL=taguchi) | ( ACL=#search) | (ACL=@ 
anyone ) ) ) . 

In the above embodiment, even if there exist a 
plurality of target document stores, a document can be 
searched for. 

25 With reference to Figs. 32 through 35, the operation 

of the access right managing modules 511a, 512b, and 541b 
will now be described. 
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In order to treat a plurality of document stores 
which differ in method for managing access rights, it is 
necessary to manage access methods according to document 
stores. In this embodiment, therefore, an access method etc. 
5 for each document store are managed by the access right 
managing modules 511a, 512b, and 541b, 

First, the operation of the access right managing 
module 511a will be described with reference to Fig. 32. 

As shown in Fig. 32, the access right managing 
10 module 511a stores the type of a document store and a method 
for accessing it by associating them. For example, a 
document store the type of which is "DB#1" is accessed by 
the use of access instruction "queryAccess ( ) " . 

The name and type of a target document store are 
15 passed from an administrator when an index is generated. 
The access right managing module 511a searches for an access 
instruction corresponding to the type of the document store 
which it received, and obtains access right information from 
the target document store in compliance with this 
20 instruction • Methods for accessing respective document 
stores are unitarily managed in this way, so even if a 
plurality of document stores which are different are 
connected, a searching process can be performed smoothly. 

With reference to Fig. 33, the operation of the 
2 5 access right managing module 512b will now be described. 

As shown in Fig. 33, the access right managing 
module 512b adds information for specifying the type of a 
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document store to an index when it is generated. 

As a result, if the original document store is 
referred to on the basis of an index obtained as a search 
result, referring to this information stored in the index 
5 will make it easy to know a method for accessing the 
objective document store. A user therefore does not need to 
input the type of a document store, resulting in a smoother 
searching process. 

With reference to Figs. 34 and 35, the operation of 
10 the access right managing module 541b will now be described. 

An embodiment shown in Fig. 34 shows an easy way of 
obtaining a method for accessing a document store by 
referring to information stored in the access right managing 
module 541b in the case of the document store being inquired 
15 of whether or not a user who accessed is a normal user. 

In this example, when a user inputs the name and 
type of a document store to be searched, the access right 
managing module 541b obtains an access instruction for a 
document store of a type specified and inquires of the 
20 target document store in compliance with this instruction 
whether or not this user is a normal user. 

Even if there exist a plurality of document stores 
which differ in access method, a user can search in this way 
without feeling the difference. 
25 With reference to Fig. 35, a method for obtaining an 

access instruction without inputting the type of a document 
store will now be described. 
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In an embodiment shown in Fig. 35, information 
indicating the type of a document store is stored in an 
index. When a user requests authentication, the access 
right managing module 541b therefore refers to an index 
5 corresponding to the document store and specifies the type 
of the objective document store on the basis of information 
indicating its type stored in the index. 

Then the access right managing module 541b obtains 
an access instruction corresponding to that type, accesses 
10 the objective document store in compliance with the access 
instruction, and performs authentication. 

In the above embodiment , even if there exist 
document stores which differ in access method, user 
authentication etc. can be performed smoothly. 
15 With reference to Figs. 36 and 37, the operation of 

the administrator authorization treating modules 512e and 
543b will now be described. 

If only documents for which a user has access rights 
are displayed as search results in the above way and the 
20 same condition is imposed on an administrator, the 
management of documents cannot be performed smoothly. In an 
embodiment of the present invention, therefore, an 
administrator shall have access rights for all documents. 

Fig. 36 is a view for describing the operation of 
25 the administrator authorization treating module 512e. As 
shown in Fig. 36, the administrator authorization treating 
module 512e stores "root," indicating an administrator, in 
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ACLs of all indexes when they are generated. This enables 
administrator "root" to refer to all documents by the use of 
a search query including (ACL=root) when he/she logs in. 

Figs. 37(A) and 37(B) show an embodiment being 
5 different from the one in Fig. 36. In this example, the 
administrator authorization treating module 543b generates 
queries which differ between a common user and an 
administrator. Unlike the above case, particular 

information is not added to an index. 

10 That is to say, as shown in Fig. 37(A), a search 

query including access rights is generated for a common user, 
as is the same as the above case. As shown in Fig. 37(B), on 
the other hand, a search query including only input 
conditions is generated for an administrator. This 

15 expression does not include conditions concerning access 
rights . 

This enables an administrator who accesses to search 
for all documents, resulting in smooth document management. 

With reference to Figs. 38(A) through 40, the 
20 operation of the access right management on/off switching 
module 51 2d will now be described. 

The limitation of access to all or part of document 
stores may need to be stopped according to using 
environments- In this embodiment, the access right 
25 management on/off switching module 512d performs a process 
for coping with such a case. 

Figs. 38(A) and 37(B) are views for describing an 
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example of the operation of the access right management 
on/off switching module 512d., 

As shown in Fig. 38(A), the access right management 
on/off switching module 512d generates an index for a 
5 document store access to which needs to be limited, as is 
the same as the above case. 

As shown in Fig. 38(B), on the other hand, the 
access right management on/off switching module 512d stores 
"@anyone," indicating that all users can access, in ACL of 
10 an index which it generates for a document store access to 
which does not need to be limited. 

As a result, anyone can access a document store 
access to which does not need to be limited. 

With reference to Figs. 39(A), 39(B) and 40, a 
15 method for stopping the limitation of access, being 
different from the one shown in Figs. 38(A) and (B) , will 
now be described. 

In an example shown in Figs. 39(A) and 38(B), if an 
administrator gives the instruction that access to a 
20 predetermined document store does not need to be limited, 
the access right management on/off switching module 512d 
adds information indicating that the limitation of access is 
stopped to the corresponding index storing section. In this 
example, if access is limited, then information given to the 
25 index storing section 52 is set to "ON" state (Fig. 39(A)); 
if the limitation of access is stopped, then information 
given to the index storing section 52 is set to "OFF" state 
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(Fig. 39(B)). 

With reference to Fig. 40, an example of a searching 
process reflecting information set in this way will now be 
described. 

5 When a conditional expression and user ID are 

supplied from a user, the access right management on/off 
switching module 543a inquires whether or not information 
given to the corresponding index storing section 52 is "ON" . 
If it is "ON," then a search query including access rights 

10 is generated as usual; if it is "OFF," then the input 
conditional expression is output in its original form. In 
an example shown in Fig. 40, access rights are "OFF," so 
input conditional expression (Title=Proposal 

& (Body= Internet ) is output in its original form. 

15 In the above embodiment, the limitation of access by 

creating access rights can be stopped or used at need. The 
limitation of access therefore can be used properly 
according to purposes . 

With reference to Figs. 41 and 42, the operation of 

20 the group definition expanding module 511b will now be 
described. 

In the methods which have been described, it is 
necessary to inquire at search time which group a user who 
searches belongs to. A method for improving searching speed 
25 by saving inquiring a group at search time will now be 
described. 

The group definition expanding module 511b sets 
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access right information in an index in compliance with a 
group definition at the time of the index being generated. 

Fig. 41 is a view for describing operation for 
generating an index. As shown in Fig. 41, when an index is 
5 generated, the group definition expanding module 511b refers 
to definition information concerning a group, which is 
permitted to access, in a document store and adds the user 
IDs of all members who make up the group to ACL of the index. 

As a result , in ACL of an index corresponding to a 
10 document which a group is permitted to access, the user IDs 
of all members who belong to the group will be enumerated. 
In this embodiment, there is no need to inquire a group, 
which enables to improve searching speed. 

With reference to Fig. 42, a process performed when 
15 an index generated in the above way is updated will now be 
described. 

A group definition is not constant. Information 
concerning a group definition changes with time. Therefore, 
it is necessary to cope with a change in group definition. 

20 When a group definition is changed, the group definition 
expanding module 511b specifies a document which the group 
is permitted to access, and changes information in ACL of 
the index in compliance with a new group definition. In an 
example shown in Fig. 42, "shimizu" is excluded from among 

25 the members who make up group "search," compared to the 
example shown in Fig. 41. In this case, "shimizu" will be 
excluded from indexes for all documents for which access 
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rights are given to group "search". 

In the above embodiment, even if a group definition 
changes, access permission can be given only to proper users. 

As stated above, in the present invention, right 
5 information is given to an index and is also included in a 
search query at search time. Therefore, even if right 
information is added, high-speed search can be performed. 

In the above embodiments the correspondence of a 
document store to a memory is one-to-one, but one document 

10 store may be stored dispersedly in a plurality of memories. 

Furthermore, in the above embodiments a document 
including text was given as an example of objects to be 
searched for, but information consisting of, for example, an 
image or computer data alone can be searched for, of course. 

15 Finally the above procedure can be achieved with a 

computer. In that case, the contents of a function which an 
information processing apparatus must have are described in 
a program recorded on a record medium which can be read with 
a computer. The above procedure is achieved with a computer 

20 by executing this program on the computer. A record medium 
which can be read with a computer can be a magnetic 
recording medium, a semiconductor memory, or the like. In 
order to place this program on the market, it can be stored 
on a portable record medium, such as a compact disk read 

25 only memory (CD-ROM) or a floppy disk. Alternatively, it 
can be stored in a memory of a computer connected via a 
network and be transferred to another computer via a network. 
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When this program is executed on a computer, it is stored on 
a hard disk etc. in the computer and is loaded into a main 
memory , 

As described above, an information processing 
5 apparatus for performing a process for searching for a file 
stored in a memory according to the present invention 
comprises file information obtaining means for obtaining 
predetermined information from a file, right information 
obtaining means for obtaining right information indicating a 

10 user who can access a file, index storing means for storing 
an index in which information obtained by the file 
information obtaining means is associated with right 
information obtained by the right information obtaining 
means, keyword inputting means for accepting keyword input 

15 for searching for a file, user specifying means for 
specifying a user who input a keyword, search query 
generating means for generating a search query from a 
keyword input from the keyword inputting means and 
information indicating a user specified by the user 

20 specifying means, and searching means for searching the 
index storing means for an index corresponding to a search 
query generated by the search query generating means. A 
file therefore can be searched for with right information 
added . 

25 The foregoing is considered as illustrative only of 

the principles of the present invention. Further, since 
numerous modifications and changes will readily occur to 
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those skilled in the art, it is not desired to limit the 
invention to the exact construction and applications shown 
and described, and accordingly, all suitable modifications 
and equivalents may be regarded as falling within the scope 
5 of the invention in the appended claims and their 
equivalents . 
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